Skip to main content
grammar
Source Link
sau_t
  • 818
  • 1
  • 7
  • 15

In short, from the mentioned link

why-passwords-should-be-hashed

we hash passwords to prevent an attacker with read-only access from escalating to higher power levels

Now to your question, suppose if someone has access to /etc/shadow file and the file contains the password which the user has used at multiple machines/websites or the file contains the password for other high privileged users such as root (if shadow file is accessible by low privileged user).

For cracking a hashed password, an attacker has to spend adequate amount of time or even resources, which requires efforts (Some low-level hackers will not spend such efforts and target other resources). Now this time difference is useful since users can be alerted to change their password once a breach is detected. Basically, hashing will slow down the attack as well.

So, hashing a password is helps with damage containment and stops or slows down further damage.

I recommend reading the above link for better understanding.

In short, from the mentioned link

why-passwords-should-be-hashed

we hash passwords to prevent an attacker with read-only access from escalating to higher power levels

Now to your question, suppose if someone has access to /etc/shadow file and the file contains the password which the user has used at multiple machines/websites or the file contains the password for other high privileged users such as root (if shadow file is accessible by low privileged user).

For cracking a hashed password, an attacker has to spend adequate amount of time or even resources, which requires efforts (Some low-level hackers will not spend such efforts and target other resources). Now this time difference is useful since users can be alerted to change their password once a breach is detected. Basically, hashing will slow down the attack as well.

So, hashing a password is helps with damage containment and stops or slows down further damage.

I recommend reading the above link for better understanding.

In short, from the mentioned link

why-passwords-should-be-hashed

we hash passwords to prevent an attacker with read-only access from escalating to higher power levels

Now to your question, suppose if someone has access to /etc/shadow file and the file contains the password which the user has used at multiple machines/websites or the file contains the password for other high privileged users such as root (if shadow file is accessible by low privileged user).

For cracking a hashed password, an attacker has to spend adequate amount of time or even resources, which requires efforts (Some low-level hackers will not spend such efforts and target other resources). Now this time difference is useful since users can be alerted to change their password once a breach is detected. Basically, hashing will slow down the attack as well.

So, hashing a password helps with damage containment and stops or slows down further damage.

I recommend reading the above link for better understanding.

added 224 characters in body
Source Link
sau_t
  • 818
  • 1
  • 7
  • 15

In short, from the mentioned link

why-passwords-should-be-hashed

we hash passwords to prevent an attacker with read-only access from escalating to higher power levels

Now to your question, suppose if someone has access to /etc/shadow file and the file contains the password which the user has used at multiple machines/websites or even websitesthe file contains the password for other high privileged users such as root (if shadow file is accessible by low privileged user).

For cracking a hashed password, an attacker has to spend adequate amount of time or even resources, which requires efforts (Some low-level hackers will not spend such efforts and target other resources). Now this time difference is useful since users can be alerted to change their password once a breach is detected. Basically, hashing will slow down the attack as well.

So, hashing a password is helps with damage containment and stops or slows down further damage.

I recommend reading the above link for better understanding.

In short, from the mentioned link

why-passwords-should-be-hashed

we hash passwords to prevent an attacker with read-only access from escalating to higher power levels

Now to your question, suppose if someone has access to /etc/shadow file and the file contains the password which the user has used at multiple machines or even websites.

For cracking a hashed password, an attacker has to spend adequate amount of time or even resources, which requires efforts (Some low-level hackers will not spend such efforts and target other resources). Now this time difference is useful since users can be alerted to change their password once a breach is detected. Basically, hashing will slow down the attack as well.

I recommend reading the above link for better understanding.

In short, from the mentioned link

why-passwords-should-be-hashed

we hash passwords to prevent an attacker with read-only access from escalating to higher power levels

Now to your question, suppose if someone has access to /etc/shadow file and the file contains the password which the user has used at multiple machines/websites or the file contains the password for other high privileged users such as root (if shadow file is accessible by low privileged user).

For cracking a hashed password, an attacker has to spend adequate amount of time or even resources, which requires efforts (Some low-level hackers will not spend such efforts and target other resources). Now this time difference is useful since users can be alerted to change their password once a breach is detected. Basically, hashing will slow down the attack as well.

So, hashing a password is helps with damage containment and stops or slows down further damage.

I recommend reading the above link for better understanding.

Source Link
sau_t
  • 818
  • 1
  • 7
  • 15

In short, from the mentioned link

why-passwords-should-be-hashed

we hash passwords to prevent an attacker with read-only access from escalating to higher power levels

Now to your question, suppose if someone has access to /etc/shadow file and the file contains the password which the user has used at multiple machines or even websites.

For cracking a hashed password, an attacker has to spend adequate amount of time or even resources, which requires efforts (Some low-level hackers will not spend such efforts and target other resources). Now this time difference is useful since users can be alerted to change their password once a breach is detected. Basically, hashing will slow down the attack as well.

I recommend reading the above link for better understanding.